no nothing is displayed ... View more

@wmyersas i dont know what a multivalue field is in Splunk as i am still new to it @dglass0215 i have run the search; index=windows sourcetype="Script:InstalledApps" DisplayName="\"Microsoft Visio Viewer 2013"\" | stats values(DisplayName) as Applications by host Last_Seen and it still is not displaying the list of computers with that installed. ... View more

Yes it displayed all of the installed software ... View more

i tried that, i forgot to add the host=* so that it also displays the host name of the computer index=windows sourcetype="Script:InstalledApps" DisplayName="Microsoft Visio Viewer 2013" host=* | stats values(DisplayName) as Applications by host Last_Seen This still didn't work, there is no error; just no events found despite this software being installed on at least 50 machines ... View more

I am doing this search: index=windows sourcetype="Script:InstalledApps" DisplayName="Microsoft Visio Viewer 2013" | fields host,DisplayName | dedup host, DisplayName | eval | fields host,DisplayName,UserName |stats values(DisplayName) AS Applications by host Last_Seen And i get this error; Error in 'eval' command: Arguments are missing. Usage: eval dest_key = expression. The search job has failed due to an error. You may be able view the job in the Job Inspector. Could you advise? ... View more

@dglass0215 Is there a feature/search so that you can search for a specific application installed on all of the computers? Thank you ... View more

I need to be able to give the business system manager a list of users that have visio installed on their machine and be able to replicate that for any other bits of software that need to be tightly controlled. The current dashboard from the Universal Forwarder shows: The hostname, the user, the OS, the manufacturer, model and the IP address. When you click on a computer name it does a search that shows a list of hat software is installed. The problem of trying to export it as a .csv file is it exports the list of software into one cell on excel and is a mess to read. It also displayed the all of the software whereas i am trying to get a list of which computers have a certain bit of software installed. ... View more

Is it possible to give some more details on what search i could do to get the data on who has what software before generating the report to send to the user? ... View more

@kamlesh_vaghela The Computer Name (Hostname), IP Address, User who is currently logged on, IP Address, Manufacturer, MAC Address, the domain and then the installed software and updates. All of this is collected using the Universal Forwarder and displayed on a handy dashboard. I believe there is more data and events collected but the above is what i am aware of. Thanks for the help. ... View more